Google PageBreak finds 500+ XSS bugs

Google has disclosed that its AI-powered security agent, PageBreak, has uncovered more than 500 XSS vulnerabilities across its web applications since January. The system uses Gemini models to investigate potential flaws but only reports them after deterministic validators successfully reproduce the exploit against a running environment, achieving a near-zero false-positive rate. Google engineers state that the tool relies on the company's monorepo visibility and traffic signals, and the team plans to integrate it with automated fixing initiatives like CodeMender. Open article →